Cross Site Scripting in IceCMS by Thecosy
CVE-2023-33356

5.4MEDIUM

Key Information:

Vendor

Thecosy

Status
Icecms
Vendor
CVE Published:
25 May 2023

What is CVE-2023-33356?

IceCMS version 1.0.0 is susceptible to Cross Site Scripting (XSS) attacks. These types of vulnerabilities allow attackers to inject malicious scripts into web pages viewed by users. This can lead to unauthorized actions being performed on behalf of the user or expose sensitive information. It is crucial for users of IceCMS to apply security measures and patches to mitigate this risk.

References

https://github.com/Thecosy/IceCMS/issues/8

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.